campay

Warn

Audited by Socket on Apr 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s broad behavior is mostly consistent with an integration guide, and the CLI install source is legitimate, but the data path is not direct to CamPay. Authentication and API traffic are mediated by Membrane, the skill uses mutable CLI installs, and the incorrect official-docs link undermines trust. This looks more like a third-party connector/proxy skill than a native CamPay integration.

Confidence: 87%Severity: 57%
Audit Metadata
Analyzed At
Apr 23, 2026, 08:27 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fcampay%2F@dcf4c7b7cbcf1977d13acfc84a9e20c407a5a3fc